Aligning security policy with business practices is generally considered to be a key imperative for a successful company. This must necessarily start with security teams understanding the business, and business leaders understanding security requirements.
http://feedproxy.google.com/~r/Securityweek/~3/lP2WCE657_Y/continuing-problem-aligning-cybersecurity-business
